未評価
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked n...
CVE-2021-36370
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2021-36370 mc 修正版: 3:4.8.27-1
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.
参照URL
- advisory mail.gnome.org
- advisory midnight-commander.org
- advisory sourceforge.net
- report docs.ssh-mitm.at
- report github.com
- report github.com